This privacy policy is intended to help you understand what personal data we collect, why we collect it and what we do with it. Please take the time to read our privacy policy carefully. We want you to be aware of how we use your information and how you can exercise your rights.

This Privacy Policy applies to your personal data when you visit the salon of BALEJ HOUSE EOOD, UIC 201104413, and/or use our hairdressing and cosmetic services/products.

WHO WE ARE

The company providing services/goods to you in its capacity as Data Controller is Balezh HOUSE EOOD, UIC 201104413, with its registered office and head office at: 1000 Sofia, Mladost district, Eurotour Business Centre, 12, Mihail Tenev Street, 1st floor, app. 2 (hereinafter referred to as "Administrator", "we" and/or "Company") 

Data Protection Officer:  Susan Mohammed Al Hirsch, e-mail: houseofbalayage@gmail.com, Sofia, 49 Emilian Stanev Str.

We at BALEAGE HOUSE EOOD, UIC 201104413, respect the right to privacy and work continuously to keep the data we process to a minimum and as protected as possible. However, in order for you to be able to use our hairdressing and beauty services and for us to improve and develop them, we need to process some personal data. By using any of our services, you acknowledge that you have read and understood this Privacy Policy.

DATA WE COLLECT AND HOW WE USE IT

Personal data is data that describes and relates to someone in a personal capacity. These are data by which individuals can be identified. 

We collect some personal data in order to provide the services to all our customers. We process personal data only for legal reasons. We do not sell or otherwise distribute your personal data. We may share them with our selected subcontractors only when it is necessary for the provision of our services, as expressly described below.

We process the following personal data:

Customer details – names, contact telephone, e-mail, photos taken before and after the hairdressing/cosmetic services performed and video recordings.

The purposes for which we process personal data are: 

to provide hairdressing and cosmetic services or to take steps at your request before providing such services;

showcase skills and capabilities of hairdressers working in the Salon (on photos and videos);

Marketing purposes – sending information messages and online newsletters of an advertising nature.

We would like, if you give your consent, to use:

Your photos taken by us before and after the hairdressing/cosmetic services and video recordings;

your email address and phone number to send you information about our services, promotions, discounts and bonuses that you can use, by email, SMS, phone or in any of the listed ways.

Your consent is voluntary and we will not refuse you our services if you do not provide it to us. 

We will not use your contacts to advertise third-party products or services.

You can withdraw your consent at any time by writing to the data protection officer in any way that is convenient for you: by letter, e-mail and/or on-the-spot application.

METHOD OF DATA COLLECTION

We process and use only data that our customers have voluntarily provided to us. This means that each user of our products/services is responsible for not providing data to third parties in violation of their data protection rights, as we do not have access to these persons and we do not have the practical ability to control whether our customers provide data to third parties with their knowledge and consent given in accordance with legal requirements. 

Therefore, each person bears full personal responsibility if he/she provides us with data of a third party without his/her knowledge and/or without obtaining his/her consent in compliance with the requirements of the applicable legislation on the protection of personal data, including with regard to the names, phone numbers and addresses provided to us by a client.

SECURITY MEASURES

We have taken a wide range of technical and organizational measures to protect your personal data against loss or other forms of unlawful processing. Personal data is accessible only to those persons who need access to perform their work in connection with the provision of our products/services. Those persons shall be trained and authorised accordingly. Our staff is obliged to process personal data according to our instructions on lawfulness, confidentiality, ethics and appropriate use of the data. 




SUBCONTRACTING


To provide quality products/services, we have engaged product/service providers – processors, carefully selected according to their capacity to protect and process personal data. Without them, it will not be possible to offer/implement our products/services. In most cases, we do not provide your data to third parties, but use subcontractors, professionals in the field, through which we provide additional security for your data and who may at some point have access to our database system, including: for security, for maintenance of our infrastructure and mail servers, for use of secure servers and connectivity. In other cases, where required by law or contract, your data may be provided in connection with accounting or legal processing, payment, debt collection, etc., in which case the data is processed for us only on the basis of our explicit instructions and in accordance with our privacy policy with due care and security.

We do not provide your personal data to third parties without a legal or contractual basis, we do not sell or distribute it.

SMALL AND NOT FULL PERSONS

We provide services and/or sales of cosmetic products and allow them to be used only by persons over 16 years of age. If you are under 16 years of age, please seek help from a person at least 16 years of age to use our services and purchase our cosmetic products.

If we receive information that we have collected personal data from a person under the age of 16, we will immediately delete it, unless we are legally obliged to store such data.

TIME OF STORAGE AND DESTROYMENT OF DATA

In general, we process data while the customer uses our products/services and 5 (five) years thereafter to prevent the loss of data valuable to the customer, to uphold claims and claims from the customer, to resolve legal and out-of-court disputes, to collect receivables and to comply with applicable law, including the requirements of the Accountancy Act. 

YOUR RIGHTS

You have the right to request a copy of your personal data at any time, to verify the accuracy of the information stored, to correct or update this information, to request that your personal information be deleted if there are grounds for doing so, as described below. You also have the right to complain when your data protection rights have been violated. We have listed below a detailed description of your rights as data subjects:

– you have the right to request confirmation as to whether personal data relating to you are being processed and to request a copy of your personal data, as well as information relating to the collection, processing and storage of your personal data;

– You have the right to have your personal data erased for any of the following reasons: the personal data are no longer necessary for the purposes for which they were collected; where you have objected to the processing, where the processing is unlawful; where the data is processed on the basis of your consent and you withdraw that consent; where the personal data have to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject. You may be refused the deletion of your personal data for the following reasons: exercising the right to freedom of expression and information; for compliance with our legal obligation and/or for the performance of a task carried out in the public interest and/or in the exercise of official authority vested in us; for reasons of public interest in the field of public health; for the establishment, exercise or defence of legal claims;

– you have the right to have your personal data rectified if it is inaccurate or completed if it is incomplete;

– you have the right to request that the processing of your personal data be restricted, if applicable and justified, for example: contest the accuracy of the personal data, for a period that allows us to verify the accuracy of the personal data; the processing is unlawful, but you do not want the personal data to be deleted, but only their use to be restricted; we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; you have objected to the processing pending verification whether our legitimate grounds override your interests.

– you have the right to request to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller where the processing is based on consent or on a contractual obligation and the processing is carried out in an automated manner;

– you have the right to object to such processing of your personal data to the data protection officer if there are grounds for doing so.

You can address all requests to the data protection officer. To enable us to provide you with full assistance, please provide us with accurate information about you and specify your request. When exercising your rights, we may ask for additional information to establish your identity.

Please note that where your requests are manifestly unfounded and/or excessive, in particular because of their repetitive nature, we may:

1. impose a fee taking into account the administrative costs of providing the information or communication or taking the requested actions, or

2. to refuse to take action on the request.

We will make reasonable efforts to comply with your request within 30 (thirty) days of receipt of your request. If necessary, this period may be extended by a further 2 (two) months, taking into account the complexity and number of requests.

SURVEILLANCE AUTHORITY

If you believe that we have violated your rights in relation to your personal data, you can lodge a complaint with the supervisory authority in the Republic of Bulgaria, which is the Commission for Personal Data Protection. More information can be found at: www.cpdp.bg.

You can also lodge your complaint in the country where you live, at your workplace and/or in the place where you think we are violating your rights.

Last updated Privacy Policy: 30/04/2024